CVE-2024-10852
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Nov 13, 2024
CWE ID 862
Summary
CVE-2024-10852 is a vulnerability affecting the Buy one click WooCommerce plugin for WordPress. This issue permits authenticated attackers, with Subscriber-level access and above, to unauthorizedly access plugin settings through a missing capability check on the buy_one_click_export_options AJAX action. Versions up to and including 2.2.9 are impacted by this vulnerability, potentially putting sensitive data at risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.